Huawei NetEngine80E Configuration Manual - Reliability page 94
Hide thumbs
Also See for NetEngine80E:
- Configuration manual - reliability (1432 pages) ,
- Configuration manual (1301 pages) ,
- Installation manual (169 pages)
Table of Contents
HUAWEI NetEngine80E/40E Router
Configuration Guide - Reliability
l
VRRP Fast Switchover Using BFD Sampling
Generally, the VRRP backup group implements fast master/backup switchover by tracking the
BFD session status. However, this method is not applicable in some special network
environments or when the device does not support the BFD function. In this case, you can use
the BFD sampling mode to implement fast master/backup switchover.
Ignorance of Interface Down of the mVRRP Backup Group
VRRP defines three status types: Initialize, Master, and Backup. On being notified that the
interface where the VRRP backup group is configured is shut down, the VRRP backup group
switches its status to Initialize.
The mVRRP backup group is configured on two directly connected devices and Heartbeat
messages of the mVRRP backup group are transmitted over the direct link between the two
devices. When one device fails, the interface of its peer device goes Down and the status of the
mVRRP backup group on the interface becomes Initialize. As a result, the peer device also fails.
To prevent this, you can use the function of ignorance of the down of an interface where the
mVRRP backup group is configured to implement VRRP fast switchover, thus switching the
status of the mVRRP backup group to Master rather than Initialize.
Enable/Disable the Ping Function to the Virtual IP Address
To ping through virtual IP addresses that are used in the VRRP backup group, you can monitor
the operating status of the virtual routers but the VRRP backup group may suffer the ICMP
attack. In the NE80E/40E, you can run a command to enable the function to ping the virtual IP
address.
VRRP Security Functions
For different security levels of networks, you can set different authentication modes and
authentication keys in the header of VRRP packets.
In a secure network, you can adopt the default configuration. That is, the router does not
authenticate the VRRP packets to be sent and received. The router considers all the received
packets as real and valid VRRP packets. In this case, no authentication key is required.
Issue 02 (2011-09-10)
– When VRRP tracks peer BFD sessions and link BFD sessions, the status of the
backup group is changed and its priority is unchanged.
– The peer BFD session can detect faults of local and remote NPEs and the links. It
cannot distinguish whether the failure occurs locally or remotely. The link BFD
session can only detect the faults of local links or NPEs.
VRRP can monitor EFM. On a Metro Ethernet (ME) network, Bidirectional Forwarding
Detection (BFD) is usually used to detect and protect the link between the master and
backup Network Provider Edges (NPEs), and the links between the Underlayer Provider
Edge (UPE) and both NPEs. If BFD cannot be configured on the UPE, the links between
the UPE and NPEs becomes vulnerable and you need a new link protection mechanism.
Ethernet in the First Mile (EFM), a slow link detection protocol that requires fewer
resources, can just be your choice, provided that EFM is configured on the UPE.
NOTE
In BFD sampling mode, the NPE establishes multiple link BFD sessions directly with each CE without
establishing the link BFD session with the PE.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 VRRP Configuration
77
Table of Contents
